validation before check create access

This commit is contained in:
Yuri Kuznetsov
2024-04-01 15:32:07 +03:00
parent 09880ff8f1
commit 17abe18d01
+11 -5
View File
@@ -810,14 +810,10 @@ class Service implements Crud,
$this->sanitizeInput($data);
$entity->set($data);
$this->populateDefaults($entity, $data);
if (!$this->acl->check($entity, AclTable::ACTION_CREATE)) {
throw new ForbiddenSilent("No create access.");
}
$this->processValidation($entity, $data);
$this->checkEntityCreateAccess($entity);
$this->processAssignmentCheck($entity);
$this->getLinkCheck()->processFields($entity);
@@ -2047,4 +2043,14 @@ class Service implements Crud,
return $this->recordHookManager;
}
/**
* @throws Forbidden
*/
private function checkEntityCreateAccess(Entity $entity): void
{
if (!$this->acl->check($entity, AclTable::ACTION_CREATE)) {
throw new ForbiddenSilent("No create access.");
}
}
}